[Bug 984185] New: perl should be a hardened build
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=984185
Bug ID: 984185
Summary: perl should be a hardened build
Product: Fedora
Version: 18
Component: perl
Severity: unspecified
Priority: unspecified
Assignee: mmaslano(a)redhat.com
Reporter: h.reindl(a)thelounge.net
QA Contact: extras-qa(a)fedoraproject.org
CC: cweyl(a)alumni.drew.edu, iarnell(a)gmail.com,
jplesnik(a)redhat.com, kasal(a)ucw.cz,
mmaslano(a)redhat.com,
perl-devel(a)lists.fedoraproject.org, ppisar(a)redhat.com,
psabata(a)redhat.com, rc040203(a)freenet.de,
tcallawa(a)redhat.com
perl is often used for long running services (mailgraph, smokeping, postgrey..)
as well as called from webservers with untrusted input
so it should be "Full RELRO" and PIE
http://fedoraproject.org/wiki/Packaging:Guidelines#PIE
______________________________________________________
If your package meets any of the following criteria you MUST enable the PIE
compiler flags:
Your package is long running. This means it's likely to be started and keep
running until the machine is rebooted, not start on demand and quit on idle.
Your package has suid binaries, or binaries with capabilities.
Your package runs as root.
If your package meets the following criteria you should consider enabling the
PIE compiler flags:
Your package accepts/processes untrusted input.
______________________________________________________
[root@srv-rhsoft:~]$ checksec --file /usr/bin/perl
RELRO STACK CANARY NX PIE RPATH
RUNPATH FILE
Partial RELRO Canary found NX enabled No PIE RPATH
RUNPATH /usr/bin/perl
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=YABEZK214w&a=cc_unsubscribe
6 years, 8 months
[Bug 1265922] New: amavisd and clamav dependencies
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1265922
Bug ID: 1265922
Summary: amavisd and clamav dependencies
Product: Fedora EPEL
Version: epel7
Component: amavisd-new
Severity: low
Assignee: j.orti.alcaine(a)gmail.com
Reporter: sistemisti-posta(a)csi.it
QA Contact: extras-qa(a)fedoraproject.org
CC: janfrode(a)tanso.net, j.orti.alcaine(a)gmail.com,
perl-devel(a)lists.fedoraproject.org, steve(a)silug.org,
vanmeeuwen+fedora(a)kolabsys.com
Description of problem:
I have amavisd-new without local clamd server, because I configured it remotely
through instream protocol.
I very appreciate if you could leave clamav and altermime dependencies.
Version-Release number of selected component (if applicable):
amavisd-new-2.10.1-4.el7
Now I forcedly removed clamav, but it is not good:
** Found 3 pre-existing rpmdb problem(s), 'yum check' output follows:
amavisd-new-2.10.1-4.el7.noarch has missing requires of altermime
amavisd-new-2.10.1-4.el7.noarch has missing requires of clamav-server
amavisd-new-2.10.1-4.el7.noarch has missing requires of clamav-server-systemd
Thanks a lot
--
You are receiving this mail because:
You are on the CC list for the bug.
6 years, 9 months
[Bug 1268828] New: RFE: On 32 bit platforms, enable -Duse64bitint and maybe also -Duselongdouble
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1268828
Bug ID: 1268828
Summary: RFE: On 32 bit platforms, enable -Duse64bitint and
maybe also -Duselongdouble
Product: Fedora
Version: rawhide
Component: perl
Assignee: jplesnik(a)redhat.com
Reporter: rjones(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: cweyl(a)alumni.drew.edu, iarnell(a)gmail.com,
jplesnik(a)redhat.com, kasal(a)ucw.cz,
perl-devel(a)lists.fedoraproject.org, ppisar(a)redhat.com,
psabata(a)redhat.com, rc040203(a)freenet.de,
tcallawa(a)redhat.com
Description of problem:
Perl on Fedora 32 bit platforms uses 32 bit ints, and on 64 bit
platforms uses 64 bit ints.
This causes some problems when we express size-in-bytes in some
programs -- it is easy for these kind of programs to work fine on
the common 64 bit platform, but to fail to work in bad ways (rounding
errors or overflows) on 32 bit. Since 32 bit is comparatively rare,
these bugs can go unnoticed. An example of a program that will fail
like this is: http://git.annexia.org/?p=import-to-ovirt.git;a=tree
Also, Debian (since Wheezy) has enabled this option, so by making
this change we would be consistent with Debian & Ubuntu.
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=310995
Some pros and cons described here:
http://www.nntp.perl.org/group/perl.perl5.porters/2010/04/msg158984.html
There is also interaction with another option (-Duselongdouble).
Version-Release number of selected component (if applicable):
perl-5.22.0-350.fc24
--
You are receiving this mail because:
You are on the CC list for the bug.
6 years, 10 months
[Bug 1267964] New: perl-IPTables-Parse: Use of predictable names for temporary files [epel-5]
by Red Hat Bugzilla
https://bugzilla.redhat.com/show_bug.cgi?id=1267964
Bug ID: 1267964
Summary: perl-IPTables-Parse: Use of predictable names for
temporary files [epel-5]
Product: Fedora EPEL
Version: el5
Component: perl-IPTables-Parse
Keywords: Security, SecurityTracking
Severity: low
Priority: low
Assignee: tremble(a)tremble.org.uk
Reporter: amaris(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: perl-devel(a)lists.fedoraproject.org,
tremble(a)tremble.org.uk
Blocks: 1267962
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of Fedora EPEL.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
epel-5 tracking bug for perl-IPTables-Parse: see blocks bug list for full
details of the security issue(s).
This bug is never intended to be made public, please put any public notes
in the blocked bugs.
[bug automatically created by: add-tracking-bugs]
Referenced Bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1267962
[Bug 1267962] perl-IPTables-Parse: Use of predictable names for temporary
files
--
You are receiving this mail because:
You are on the CC list for the bug.
7 years
[Bug 570321] New: Missing Dependencies postgresql-plperl and perl-BDB-Pg > 2.0
by Red Hat Bugzilla
Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.
Summary: Missing Dependencies postgresql-plperl and perl-BDB-Pg > 2.0
https://bugzilla.redhat.com/show_bug.cgi?id=570321
Summary: Missing Dependencies postgresql-plperl and perl-BDB-Pg
> 2.0
Product: Fedora EPEL
Version: el5
Platform: All
OS/Version: Linux
Status: NEW
Severity: medium
Priority: low
Component: bucardo
AssignedTo: itamar(a)ispbrasil.com.br
ReportedBy: james.t.saint-rossy(a)nasa.gov
QAContact: extras-qa(a)fedoraproject.org
CC: fedora-perl-devel-list(a)redhat.com,
itamar(a)ispbrasil.com.br
Classification: Fedora
Description of problem:
Installing bucardo-4.4.0-2.el5 fails with missing dependencies.
postgresql-plperl and perl-bdb-pg >= 2.0 do not exist in either the default or
epel repositories.
Version-Release number of selected component (if applicable):
bucardo-4.4.0-2.el5
How reproducible:
Always
Steps to Reproduce:
1. yum install bucardo
Actual results:
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
* addons: mirror.skiplink.com
* base: mirror.cogentco.com
* epel: mirrors.tummy.com
* extras: mirrors.serveraxis.net
* updates: mirror.san.fastserv.com
addons | 951 B 00:00
base | 2.1 kB 00:00
epel | 3.4 kB 00:00
extras | 2.1 kB 00:00
updates | 1.9 kB 00:00
Setting up Install Process
Resolving Dependencies
--> Running transaction check
---> Package bucardo.noarch 0:4.4.0-2.el5 set to be updated
--> Processing Dependency: perl(DBD::Pg) >= 2.0 for package: bucardo
--> Processing Dependency: postgresql-plperl for package: bucardo
--> Processing Dependency: perl(DBD::Pg) for package: bucardo
--> Processing Dependency: perl(DBIx::Safe) for package: bucardo
--> Running transaction check
---> Package bucardo.noarch 0:4.4.0-2.el5 set to be updated
--> Processing Dependency: perl(DBD::Pg) >= 2.0 for package: bucardo
--> Processing Dependency: postgresql-plperl for package: bucardo
---> Package perl-DBD-Pg.i386 0:1.49-2.el5_3.1 set to be updated
---> Package perl-DBIx-Safe.noarch 0:1.2.5-6.el5 set to be updated
--> Finished Dependency Resolution
bucardo-4.4.0-2.el5.noarch from epel has depsolving problems
--> Missing Dependency: postgresql-plperl is needed by package
bucardo-4.4.0-2.el5.noarch (epel)
bucardo-4.4.0-2.el5.noarch from epel has depsolving problems
--> Missing Dependency: perl(DBD::Pg) >= 2.0 is needed by package
bucardo-4.4.0-2.el5.noarch (epel)
Error: Missing Dependency: postgresql-plperl is needed by package
bucardo-4.4.0-2.el5.noarch (epel)
Error: Missing Dependency: perl(DBD::Pg) >= 2.0 is needed by package
bucardo-4.4.0-2.el5.noarch (epel)
You could try using --skip-broken to work around the problem
You could try running: package-cleanup --problems
package-cleanup --dupes
rpm -Va --nofiles --nodigest
Expected results:
Package successfully installs
Additional info:
Tested on Centos 5.4 and RHEL 5.4
--
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
7 years
[Bug 783468] New: missing dependancy on perl-Email-Simple-Creator
by Red Hat Bugzilla
Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.
Summary: missing dependancy on perl-Email-Simple-Creator
https://bugzilla.redhat.com/show_bug.cgi?id=783468
Summary: missing dependancy on perl-Email-Simple-Creator
Product: Fedora EPEL
Version: el5
Platform: Unspecified
OS/Version: Unspecified
Status: NEW
Severity: unspecified
Priority: unspecified
Component: perl-Email-MIME-Creator
AssignedTo: tcallawa(a)redhat.com
ReportedBy: carl.johnstone(a)onthebeach.co.uk
QAContact: extras-qa(a)fedoraproject.org
CC: tcallawa(a)redhat.com, fedora-perl-devel-list(a)redhat.com
Classification: Fedora
Story Points: ---
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
Description of problem:
The perl-Email-MIME-Creator package has a missing dependency on
Email::Simple::Creator / perl-Email-Simple-Creator
Version-Release number of selected component (if applicable):
perl-Email-MIME-Creator.noarch 0:1.453-2.el5
--
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
7 years
[Bug 706721] New: Missing Requires: perl(Clone)
by Red Hat Bugzilla
Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.
Summary: Missing Requires: perl(Clone)
https://bugzilla.redhat.com/show_bug.cgi?id=706721
Summary: Missing Requires: perl(Clone)
Product: Fedora EPEL
Version: el5
Platform: Unspecified
OS/Version: Unspecified
Status: NEW
Severity: unspecified
Priority: unspecified
Component: perl-Hash-Merge
AssignedTo: tcallawa(a)redhat.com
ReportedBy: redhat-bugzilla(a)camperquake.de
QAContact: extras-qa(a)fedoraproject.org
CC: tcallawa(a)redhat.com, iarnell(a)gmail.com,
fedora-perl-devel-list(a)redhat.com
Classification: Fedora
Story Points: ---
Description of problem:
perl-Hash-Merge requires perl(Clone), but the spec does not reflect this.
Version-Release number of selected component (if applicable):
perl-Hash-Merge-0.11-2.el5
How reproducible:
Look at /usr/lib/perl5/vendor_perl/5.8.8/Hash/Merge.pm, line 231
Steps to Reproduce:
1.
2.
3.
Actual results:
Expected results:
Additional info:
--
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
7 years
[Bug 703101] New: [PATCH] DateTime should be rebuilt on tzdata updates
by Red Hat Bugzilla
Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.
Summary: [PATCH] DateTime should be rebuilt on tzdata updates
https://bugzilla.redhat.com/show_bug.cgi?id=703101
Summary: [PATCH] DateTime should be rebuilt on tzdata updates
Product: Fedora EPEL
Version: el5
Platform: Unspecified
OS/Version: Unspecified
Status: NEW
Severity: unspecified
Priority: unspecified
Component: perl-DateTime
AssignedTo: tremble(a)tremble.org.uk
ReportedBy: lkundrak(a)v3.sk
QAContact: extras-qa(a)fedoraproject.org
CC: fedora-perl-devel-list(a)redhat.com,
tremble(a)tremble.org.uk
Classification: Fedora
Story Points: ---
Description of problem:
tzdata package updates and new time zones are added from time to time (such as
Asia/Kolkata). As DateTime contains files generated from it, it should be
rebuilt on each such update.
The patch attached adds an explicit dependency on specific version of tzdata,
so that it would disallow updates in case of tzdata rebuild w/o DateTime
rebuilt, so that it would no go unnoticed.
Additional info:
At the very least, even if the patch is rejected, please trigger a DateTime
rebuild. Maybe coordinate with tzdata maintainer on future updates.
--
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
7 years
[Bug 757089] New: cpanspec error: Dest dir longer than base dir is not supported
by Red Hat Bugzilla
Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.
Summary: cpanspec error: Dest dir longer than base dir is not supported
https://bugzilla.redhat.com/show_bug.cgi?id=757089
Summary: cpanspec error: Dest dir longer than base dir is not
supported
Product: Fedora
Version: 16
Platform: Unspecified
OS/Version: Unspecified
Status: NEW
Severity: unspecified
Priority: unspecified
Component: cpanspec
AssignedTo: steve(a)silug.org
ReportedBy: kas(a)fi.muni.cz
QAContact: extras-qa(a)fedoraproject.org
CC: steve(a)silug.org, fedora-perl-devel-list(a)redhat.com
Classification: Fedora
Story Points: ---
Type: ---
Description of problem:
I am trying to build some CPAN modules as RPMs (namely Env::C and
IO::Socket::Multicast), but the build fails with the following error:
[...]
extracting debug info from
/root/rpmbuild/BUILDROOT/perl-Env-C-0.08-1.fc16.x86_64/usr/lib64/perl5/vendor_perl/auto/Env/C/C.so
Dest dir longer than base dir is not supported
error: Bad exit status from /var/tmp/rpm-tmp.LI9AHv (%install)
I am not sure why the length of both paths should matter at all, but the cause
of the problem is that cpanspec sets up too long buildroot.
Taking the generated spec file, shortening the buildroot path, and rebuilding
the package using the modified spec file works for me
Before:
BuildRoot: %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)
After:
BuildRoot: %{_tmppath}/%{name}
Version-Release number of selected component (if applicable):
cpanspec-1.78-9.fc16.noarch
How reproducible:
100 %
Steps to Reproduce:
1. cpanspec --build Env::C
Actual results:
build fails with the above error message
Expected results:
perl-Env-C binary and source RPMs should be built
--
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
7 years